ONOS and AT&T Team Up to Deliver CORD
ON.Lab wants to transform the CO into a data center, and will demo the concept at Open Networking Summit.
iOS Developers — Migrate to iOS 9 with CloudFlare
Thousands of developers use CloudFlare to accelerate and secure the backend of their mobile applications and websites. This week is Apple’s Worldwide Developers Conference (WWDC), where thousands of Apple developers come to San Francisco to talk, learn and share best practices for developing software for Apple platforms. New announcements from Apple this week make CloudFlare an even more obvious choice for application developers.
New operating systems, new application requirements
The flagship announcement of WWDC 2015 was a new version of Apple’s mobile operating system, iOS 9, to be released in September with a developer preview available now. They also announced a new Mac operating system, OS X El Capitan, launching in the fall. Apple has a track record of developing and supporting technologies that enhance user privacy and security with iMessage and Facetime and the trend is continuing with these new operating systems. In both cases, Apple is requiring application developers to make use of two network technologies that CloudFlare is big fan of: HTTPS and IPv6.
For iOS 9 and El Capitan, all applications submitted to the iOS and Mac App Stores must work over IPv6. In previous versions, applications were allowed that only worked with IPv4.
From Continue reading
Campus LAN Design – A Different Approach
Throughout my career I have implemented a pretty large number of standard Cisco campus LAN designs. You know the model; a hierarchical one with access switches aggregating to a distribution layer, which then aggregates to a fast core switching layer. Pieces of the hierarchy can be collapsed into one another in situations where, for example, due to […]
Author information
The post Campus LAN Design – A Different Approach appeared first on Packet Pushers Podcast and was written by Andy Burridge.
Should I Use a Traditional Firewall in Microsegmented Environment?
One of my readers wondered whether one still needs traditional firewalls in microsegmented environments like VMware NSX.
As always, it depends.
Read more ...Cisco Security Has a Job Waiting for John Chambers
Security is pervasive to networking, so it's an area Chambers will keep an eye on.
BRKSEC-2139: Advanced Malware Protection
Presenter: Eric Howard, Techincal Marketing Engineer
Why aren’t we stopping all the malware???
The term “APT” has become the boogey man of cyber security. :-)
You don’t need to know squat about writing malware in order to launch malware
- Malware rentals
- Malware as a Service (swipe CC, pay bitcoin)
Why aren’t we stopping all the malware?
- To solve the malware problem is to follow a very involved, multi-step process. Not every step can be automated; humans are needed (analysis, triage, more). This makes the process expensive, too.
- There’s no silver bullet
Product does not solve the issue. Process is required, too. Ideally, good process backed by good product.
If you knew you were going to be compromised, would you do security differently? — Marty Roesch, Cheif Architect, Cisco Security, founder of Sourcefire
Do security different:
- Plan A – Prevention: shore up the environment; dig a bigger moat, build thicker walls
- Plan B – Retrospection: track system behaviors without regard for disposition (ie, do this for everything, not just known malware but also “known good” and “unknown”)
Plan A
- 1-to-1 signatures: like anti-virus; also hashes; AV vendors only enable 8-10% of their rules; AMP cloud runs all sigs all the time; Continue reading
BRKDCT-2333 — Data Center Network Failure Detection
Presenter: Arkadiy Shapiro, Manager Technical Marketing (Nexus 2000 - 7000) @ArkadiyShapiro
“You could say I'm obsessed with BFD” -Arkadiy
Fast failure detection is the key to fast convergence.
BRKSEC-2137 — Snort Implementation in Cisco Products
Presenter: Eric Kostlan, Technical Marketing Engineer, Cisco Security Technologies Group
“Above all, Snort is a community” -Eric
Snort stats
- over 4 million downloads
- nearly 500,000 registered users
Snort was created in 1998 (!!). Sourcefire founded in 2001.
BRKCRS-3900: NBase-T and the Evolution of Ethernet
Presenters: Dave Zacks, Distinguished Engineer; Peter Zones, Principle Engineer
History has been: 10x performnce increase at 3x the cost. 40Gb broke that model –> 100Gb PHYs were very expensive; industry needed/wanted an intermediate step.
Ethernet has a really strong roadmap and will continue to evolve for a very long time. Roadmap: http://www.ethernetalliance.org/roadmap/
- 25Gb – direct server connect (Twinax)
- 40GBase-T (Cat 8 cable!)
- 2.5/5G – N-BaseT
- 400Gb
- More
SERDES
- Serializer/deserializer
- Turns bits on the wire into bytes and vise-versa
- 40Gb Ethernet based on 4x10Gb SERDES
100m is the sweet spot for copper cable lengths. Why? CSMA/CD and also electrical wiring, placement of wiring closets just make 100m the right fit.
Cisco Mgig
- PoE/PoE+/UPoE
- Standards compliant
- Investment protection (existing cable plant)
- Supports 100M but not 10M; (had to drop something as far as standards and nobody uses 10M anymore really)
802.11ac Wave 2
- Max PHY rate: 6.8Gbps (in absolute best conditions)
- More likely 3-ish Gb/s
- Point: it’s more than 1Gbs
Cisco Mgig products:
- 4500E line card
- New 3850 models with Mgig ports
- New compact 3560CX with 2x Mgig ports
Between 2003 and 2014, approx 70 billion meters of Cat 5e and Cat 6 cabling were sold
Leveraging SD-WAN for Skype for Business Enterprise Voice
This guest blog post is by Daniel Teichman, Senior Manager, Product Marketing; and Brad Chapin, Director, Strategic Alliances, at Sonus. We thank Sonus for being a sponsor. Software-defined wide area network (SD-WAN) technology is a viable option for organizations that have to provide real-time Unified Communications (UC), such as Microsoft’s Skype for Business Enterprise Voice, […]
Author information
The post Leveraging SD-WAN for Skype for Business Enterprise Voice appeared first on Packet Pushers Podcast and was written by Drew Conry-Murray.